Summary
[2.9.1-5.0.1.el7_1.2]
- Update doc/redhat.gif in tarball
- Add libxml2-oracle-enterprise.patch and update logos in tarball
[2.9.1-5.2]
- Fix missing entities after CVE-2014-3660 fix
- CVE-2014-0191 Do not fetch external parameter entities (rhbz#1195649)
- Fix regressions introduced by CVE-2014-0191 patch
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | libxml2 | 0:2.9.1-5.0.1.el7_1.2 |
| Oracle Linux · 7 | libxml2-devel | 0:2.9.1-5.0.1.el7_1.2 |
| Oracle Linux · 7 | libxml2-python | 0:2.9.1-5.0.1.el7_1.2 |
| Oracle Linux · 7 | libxml2-static | 0:2.9.1-5.0.1.el7_1.2 |
Vulnerabilities 1
-
Unscored —
The xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web Listener in Oracle HTTP Ser…